General
-
Target
https://gofile.io/d/Uvb99S
-
Sample
240607-tattgaaf6y
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Office04
C2
gasepaj312-37830.portmap.host:37830
Mutex
9ec5ac6f-5263-4dfc-a32e-9b7a5963a093
Attributes
-
encryption_key
114DCD70BE2CA4459335B931C432A00C1D7C91EA
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
https://gofile.io/d/Uvb99S
Score10/10-
Quasar RAT
Quasar is an open source Remote Access Tool.
-
Quasar payload
-
Executes dropped EXE
-
Drops file in System32 directory
-